Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          cCBDGBrVQTlBmsyapzNj0UEb9SUtarW9lJsU+1W5EII=
Subject key identifier:   60:A1:C8:33:4C:55:11:D6:18:3D:73:22:9F:E4:6E:5D:59:1F:D0:A5
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       019F91DAC57D8E3BBCADE1BDA34D361AE350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          132A
Signing time:             Fri 24 Jul 2026 02:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:01 +0000
Files and hashes:         1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
                          2: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
                          3: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: eaFmp1GAraR6ZAdfjHt/RRdNqnLEhv81dn9LyCfux24=)
                          4: az8-qmAm__Q2vWY0AcJPLxKPa7w.roa (hash: wZzIfzMKAO+r012Fp/hJId8drWxI5XCw8K4AvtAAvEM=)
                          5: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
                          6: ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa (hash: QvdoLk4yxysIF/RBd4WT88j/9RIybsVbv3Yb9pLmzK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:c5:7d:8e:3b:bc:ad:e1:bd:a3:4d:36:1a:e3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: Jul 24 02:01:01 2026 GMT
            Not After : Jul 25 02:01:01 2026 GMT
        Subject: CN=60a1c8334c5511d6183d73229fe46e5d591fd0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:e8:e1:1f:5d:66:23:27:36:6f:88:75:31:
                    6d:b3:10:52:cd:4b:82:42:0c:72:fa:a5:6a:67:4e:
                    c9:60:35:6e:d4:68:91:ee:69:c7:66:e2:62:ae:44:
                    8b:b6:24:fb:fe:6c:7b:52:a5:53:41:4e:63:21:22:
                    e0:b6:ac:a2:f4:c9:8e:c0:0f:91:e5:2d:52:76:82:
                    d4:3e:7d:99:89:1b:4c:c8:01:c2:46:b8:0e:b6:c6:
                    d9:79:64:17:9b:ff:ad:2e:6e:0f:9a:3b:94:0c:2a:
                    46:48:dc:6d:8a:47:73:31:33:02:2a:37:19:5b:ac:
                    82:a5:ad:f7:9d:75:66:76:41:a4:26:9e:88:27:ec:
                    1b:40:5f:c5:b0:85:2f:d2:b5:00:d8:91:28:83:6f:
                    d6:05:ac:8b:43:57:60:ea:85:65:8b:ee:25:ca:4a:
                    fc:25:80:6f:37:be:c6:63:9f:3f:4b:c5:d0:23:38:
                    69:3a:d7:53:6b:cd:9d:d9:7f:a4:13:7c:0c:69:f2:
                    d9:d6:0f:29:fc:11:68:e7:1f:a5:ce:e9:fe:98:31:
                    0a:98:49:4a:7b:8f:c7:23:57:b8:fe:f0:71:17:d6:
                    f7:15:01:b7:ed:0c:97:4a:93:bc:83:53:41:a4:d5:
                    31:29:0c:e2:37:41:cf:30:a6:1f:84:a6:84:46:6a:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A1:C8:33:4C:55:11:D6:18:3D:73:22:9F:E4:6E:5D:59:1F:D0:A5
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a1:29:e5:1d:d5:ab:f4:bb:f5:c4:b5:56:b2:31:99:4f:67:
         46:86:13:a8:43:de:92:c8:ae:9b:77:cc:8e:a5:e1:44:ad:45:
         57:75:e4:e1:89:b2:f2:11:86:5a:0b:ca:bd:e6:24:67:05:18:
         72:4d:86:51:d4:62:1d:3d:67:08:93:dd:4c:99:a6:bb:bd:07:
         19:86:9f:98:eb:8b:37:7c:4f:ff:5b:d3:67:be:a6:21:3a:76:
         47:34:97:4e:93:f6:83:9e:60:7b:82:b0:14:21:89:ee:86:2a:
         98:57:86:ab:cb:2e:cc:00:83:70:30:b0:ff:d8:d1:2b:90:2b:
         27:49:99:d6:02:73:72:07:65:d0:c7:ee:d8:53:92:2d:af:c0:
         20:2b:1e:36:3c:94:8b:e1:b2:48:c1:61:25:8d:d1:19:e5:41:
         a5:b4:75:5c:75:35:d0:76:70:88:1d:7f:29:55:e6:a7:d2:33:
         f1:5c:f5:70:88:af:93:01:bb:a5:cc:7c:b4:c8:67:0c:c9:af:
         88:7b:a4:ae:a2:93:d9:68:8f:13:84:a3:48:41:6c:5e:a3:f6:
         32:ae:a6:77:c3:00:28:47:d2:31:8c:79:68:f6:33:a2:27:a7:
         c4:a5:55:27:7b:4d:af:bf:e6:6e:7c:70:82:4e:35:fa:10:de:
         65:90:1f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2sV9jju8reG9o002GuNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTY5MWNhOWM1OGQwODU5YjZiODcwMjMwYjBmNTgxYmU2
NmE1OGEwHhcNMjYwNzI0MDIwMTAxWhcNMjYwNzI1MDIwMTAxWjAzMTEwLwYDVQQD
Eyg2MGExYzgzMzRjNTUxMWQ2MTgzZDczMjI5ZmU0NmU1ZDU5MWZkMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrvo4R9dZiMnNm+IdTFtsxBSzUuC
Qgxy+qVqZ07JYDVu1GiR7mnHZuJirkSLtiT7/mx7UqVTQU5jISLgtqyi9MmOwA+R
5S1SdoLUPn2ZiRtMyAHCRrgOtsbZeWQXm/+tLm4PmjuUDCpGSNxtikdzMTMCKjcZ
W6yCpa33nXVmdkGkJp6IJ+wbQF/FsIUv0rUA2JEog2/WBayLQ1dg6oVli+4lykr8
JYBvN77GY58/S8XQIzhpOtdTa82d2X+kE3wMafLZ1g8p/BFo5x+lzun+mDEKmElK
e4/HI1e4/vBxF9b3FQG37QyXSpO8g1NBpNUxKQziN0HPMKYfhKaERmpxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGChyDNMVRHWGD1zIp/kbl1ZH9ClMB8GA1UdIwQY
MBaAFGYWkcqcWNCFm2uHAjCw9YG+ZqWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQt
MWE4MGRhZmZkNzk2LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQtMWE4MGRhZmZkNzk2
LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaEp5R3V
q/S79cS1VrIxmU9nRoYTqEPeksium3fMjqXhRK1FV3Xk4Ymy8hGGWgvKveYkZwUY
ck2GUdRiHT1nCJPdTJmmu70HGYafmOuLN3xP/1vTZ76mITp2RzSXTpP2g55ge4Kw
FCGJ7oYqmFeGq8suzACDcDCw/9jRK5ArJ0mZ1gJzcgdl0Mfu2FOSLa/AICseNjyU
i+GySMFhJY3RGeVBpbR1XHU10HZwiB1/KVXmp9Iz8Vz1cIivkwG7pcx8tMhnDMmv
iHukrqKT2WiPE4SjSEFsXqP2Mq6md8MAKEfSMYx5aPYzoienxKVVJ3tNr7/mbnxw
gk41+hDeZZAfaA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:12 2026 by rpki-client